Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa
File: 3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa (raw, json)
Hash identifier: nAX8NdETHfp6usKCKvHg4s7lantwEyLYOHxmOREIUC0=
Subject key identifier: A7:EF:1E:F0:59:4E:1F:C6:D1:E2:FA:BA:B4:0E:02:BE:86:00:24:42
Certificate issuer: /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial: 7FA2B0544089C61BCB8E0E8AAE57D00A47D86185
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa
Signing time: Wed 29 Jan 2025 13:27:01 +0000
ROA not before: Wed 29 Jan 2025 13:22:01 +0000
ROA not after: Wed 28 Jan 2026 13:27:01 +0000
asID: 263047
IP address blocks: 191.243.144.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a2:b0:54:40:89:c6:1b:cb:8e:0e:8a:ae:57:d0:0a:47:d8:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
Validity
Not Before: Jan 29 13:22:01 2025 GMT
Not After : Jan 28 13:27:01 2026 GMT
Subject: CN=A7EF1EF0594E1FC6D1E2FABAB40E02BE86002442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:88:19:63:74:57:d1:7e:ec:c8:86:7c:fd:
30:5e:0d:ec:49:7a:cd:03:af:3e:6a:0b:77:96:ff:
5a:34:d0:56:b8:73:68:67:76:e3:2d:ba:95:5e:bc:
f7:16:8f:79:7a:11:a3:35:32:71:08:63:b6:1d:f6:
06:db:9f:31:12:22:90:79:ad:a8:cb:8a:40:2e:b5:
99:15:17:06:65:12:73:5d:43:dc:e0:1a:bc:30:48:
00:b2:48:94:51:2d:f3:32:f3:bc:d9:52:13:47:a7:
99:b5:f3:bb:9c:7f:90:27:0d:9a:b9:71:22:97:45:
e3:0f:6c:8a:97:32:a4:bf:f8:09:bf:36:78:7e:8d:
0f:68:9b:a7:a4:cb:a7:4c:1b:91:10:1a:dc:66:f1:
95:ad:c5:20:30:1a:33:03:4f:87:ea:6a:1b:e6:34:
c9:43:33:1b:94:a8:53:5c:4f:39:5d:c6:09:25:fb:
7a:49:ae:34:a2:d3:90:eb:e9:8a:2a:5e:0c:01:ff:
10:a7:35:b4:06:dd:55:52:c5:c0:63:d1:93:e0:2a:
d6:78:f5:27:a8:14:f8:90:f4:06:04:30:5c:47:93:
03:f9:a5:2b:9e:98:d9:3d:2b:6c:c5:29:72:60:18:
0d:df:5d:40:2e:28:4e:72:c2:42:6f:5c:2f:23:2e:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:1E:F0:59:4E:1F:C6:D1:E2:FA:BA:B4:0E:02:BE:86:00:24:42
X509v3 Authority Key Identifier:
keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:8a:42:5b:fe:94:a1:ff:f0:ef:3d:7d:30:32:1d:7e:bf:42:
30:9d:1a:d9:26:e9:30:3e:f5:1d:f6:7c:d9:ad:0e:23:f3:25:
e1:c2:54:7e:e5:64:b7:05:54:bd:8f:b9:45:99:cc:ad:74:3a:
ff:c7:59:aa:04:fb:cd:bf:92:e2:4e:cf:19:71:ed:88:58:a4:
f1:88:49:c7:40:0d:3c:34:28:d8:0d:6b:89:18:12:7f:67:f1:
8d:4f:29:31:96:9a:6e:f9:d2:e1:31:52:59:56:18:bc:98:b7:
8e:d0:b5:14:a4:fc:34:d3:02:c0:fe:c4:93:61:dc:64:c1:9f:
e1:9e:7f:ef:94:0a:8c:cf:43:a1:f8:05:fc:fe:5f:2e:8b:79:
28:36:ea:4d:e9:5d:41:61:88:9d:7d:bb:46:91:ad:bc:5d:64:
3c:40:2d:03:f6:e1:10:44:da:bc:5f:74:2f:c0:d8:ae:17:08:
1d:37:bb:e6:43:20:35:dd:a8:48:29:e6:a6:8b:4d:6a:cf:74:
41:8e:c4:20:a1:88:89:23:f4:9a:90:c1:f6:6b:4c:e3:60:cf:
6e:25:7e:b3:f9:f0:63:58:b1:4d:b9:b9:07:f2:a8:ee:72:5b:
ac:05:83:20:c5:8c:34:df:1d:5f:5c:62:9a:27:1e:35:de:51:
ea:d7:04:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf6KwVECJxhvLjg6KrlfQCkfYYYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1MjE4ODUwMDY3QjE4NzlGRjdEOTI4QTg0NDczM0NB
MDA4QzkwODAeFw0yNTAxMjkxMzIyMDFaFw0yNjAxMjgxMzI3MDFaMDMxMTAvBgNV
BAMTKEE3RUYxRUYwNTk0RTFGQzZEMUUyRkFCQUI0MEUwMkJFODYwMDI0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClIYgZY3RX0X7syIZ8/TBeDexJ
es0Drz5qC3eW/1o00Fa4c2hnduMtupVevPcWj3l6EaM1MnEIY7Yd9gbbnzESIpB5
rajLikAutZkVFwZlEnNdQ9zgGrwwSACySJRRLfMy87zZUhNHp5m187ucf5AnDZq5
cSKXReMPbIqXMqS/+Am/Nnh+jQ9om6eky6dMG5EQGtxm8ZWtxSAwGjMDT4fqahvm
NMlDMxuUqFNcTzldxgkl+3pJrjSi05Dr6YoqXgwB/xCnNbQG3VVSxcBj0ZPgKtZ4
9SeoFPiQ9AYEMFxHkwP5pSuemNk9K2zFKXJgGA3fXUAuKE5ywkJvXC8jLm2LAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUp+8e8FlOH8bR4vq6tA4CvoYAJEIwHwYDVR0j
BBgwFoAULVIYhQBnsYef99koqERzPKAIyQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC8yRDUyMTg4NTAwNjdCMTg3OUZGN0Q5MjhBODQ0NzMzQ0EwMDhDOTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTIxODg1MDA2N0IxODc5
RkY3RDkyOEE4NDQ3MzNDQTAwOEM5MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzAv
MzEzOTMxMmUzMjM0MzMyZTMxMzQzNDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzYzMzMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL/zkDANBgkqhkiG9w0BAQsFAAOCAQEAoIpC
W/6Uof/w7z19MDIdfr9CMJ0a2SbpMD71HfZ82a0OI/Ml4cJUfuVktwVUvY+5RZnM
rXQ6/8dZqgT7zb+S4k7PGXHtiFik8YhJx0ANPDQo2A1riRgSf2fxjU8pMZaabvnS
4TFSWVYYvJi3jtC1FKT8NNMCwP7Ek2HcZMGf4Z5/75QKjM9DofgF/P5fLot5KDbq
TeldQWGInX27RpGtvF1kPEAtA/bhEETavF90L8DYrhcIHTe75kMgNd2oSCnmpotN
as90QY7EIKGIiSP0mpDB9mtM42DPbiV+s/nwY1ixTbm5B/Ko7nJbrAWDIMWMNN8d
X1ximiceNd5R6tcEDg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:28:14 2025 by rpki-client